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(54) Communication quality assurance type network system 

(57) A network system including at least one end 
node (102) connected to a network and a policy server 
(104). The end node (102) issues a network resource 
reservation request. The policy server (104) stores 
therein a network resource operation policy and net- 
work resource usage status information and accepts the 
network resource reservation request issued by the end 
node. Then, based on the network resource reservation 
request and on the stored operation policy and usage 
status information, the policy server determines net- 
work resource reservation and issues to an associated 
network device a control instruction executing the deter- 
mined network resource reservation. 
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Description 

BACKGROUND OF THE INVENTION 

[0001] The present invention relates to a quality 5 
management and control system for policy-based com- 
munication routes and to a management and control 
method for network communication routes for use in 
intra-corporate and inter-corporate data communication 
networks. io 
[0002] Today, the Internet Protocol (IP), a protocol 
widely used on the Internet, is popular in corporate data 
networks. The IP is also used In networks of carriers 
that provide a telephone service or an Internet connec- 
tion service. The Internet Engineering Task Force 15 
(IETF), an international body for standardization, has 
proposed many protocols for conventional IP networks. 
These protocols include Resource Reservation Protocol 
(RSVP) and DiffServ. RSVP propagates a request onto 
routers on transmission path to reserve bandwidth- 20 
reserved transmission path to allow the end user to do 
communication reliably, and DiffServ changes the set- 
ting of reserved bandwidths. Also being drafted by IETF 
is a protocol, called COPS, which controls communica- 
tion-line bandwidth reservation and so on between 25 
devices on a network and the network management 
system. 

[0003] On the other hand, Simple Network Manage- 
ment Protocol (SNMP), defined by such publications as 
lETF-issued Request for Comment 1 907 (RFC1 907), is 30 
generally used as a method for managing devices on a 
network. This protocol allows the user to reference the 
setting status of each device and to change the setting 
of some devices. 

[0004] However, in a network where conventional 35 
protocols, such as RSVP and DiffServ, are used, a con- 
trol request is directly issued to the router from an end 
node. Therefore, a problem with conventional protocols 
is that the network manager cannot keep track of ail 
control requests and, therefore, cannot manage the net- 40 
work resources based on the operation policy the net- 
work manager designed. 

[0005] Another problem with conventional protocols 
is that it is impossible to verify, in advance, that the com- 
munication bandwidth required by the end node will be 45 
reserved. This is because conventional protocols 
reserve a communication bandwidth on the route as a 
control request is relayed from one router to another. 
[0006] A still another problem with conventional 
protocols is that, when a control request is issued 50 
across a plurality of organizations, the operation policy 
of one organization cannot be applied to another. This 
makes it impossible for a plurality of organizations to 
reserve a quality-assured communication line among 
them. 55 



SUMMARY OF THE INVENTION 

[0007] It is an object of the present invention to pro- 
vide a network manager with means for managing net- 
work resources based on an operation policy, that is a 
policy related to an operation managed by a system 
manager. 

[0008] It is another object of the present invention to 
provide an end node with means for verifying, in 
advance, whether or not a quality-assured communica- 
tion route will be reserved and, as necessary, means for 
reserving control in advance. 

[0009] It is still another object of the present inven- 
tion to provide means for automatically adjusting the 
reservation of network resources according to the oper- 
ation policy of each organization even when a control 
request is issued across a plurality of organizations. 
[0010] To achieve the objects described above, the 
present invention provides a network system including 
at least one end node connected to a network and a pol- 
icy server. The end node issues a network resource res- 
ervation request. The policy server stores therein a 
network resource operation policy and network 
resource usage status information and accepts the net- 
work resource reservation request issued by the end 
node. Then, based on the network resource reservation 
request and on the stored operation policy and usage 
status information, the policy server determines net- 
work resource reservation and issues to an associated 
network device a control instruction executing the deter- 
mined network resource reservation. 
[001 1 ] There are two types of network resource res- 
ervation requests: a pre- reservation type resource res- 
ervation request requesting network resource 
reservation in future and an immediate type resource 
reservation request immediately requesting network 
resource reservation. When the policy server receives a 
pre -reservation type resource reservation request, it 
issues a control instruction to the network device at a 
time specified by the pre-reservation type resource res- 
ervation request. When the policy server receives an 
immediate type resource reservation request, it issues a 
control instruction to the network device immediately. 

BRIEF DESCRIPTION OF THE DRAWINGS 

[0012] 

Fig. 1 is a diagram showing an example of a net- 
work according to the present invention and an 
example of information sent to a policy server. 
FIG. 2 is a diagram showing the configuration of the 
policy server according to the present invention. 
FIG. 3 is a diagram showing functional modules of 
the policy server and corresponding databases. 
FIG. 4 is a diagram showing the functional modules 
of the policy server and the corresponding data- 
bases. 
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FIG. 5 is a diagram showing the outline of process- 
ing in which a network manager sets an operation 
policy in the policy server. 

FIG. 6 is a diagram showing the outline of pre-res- 
ervation type resource reservation processing 
which is executed by the policy server in response 
to a request from a network user. 
FIG. 7 is a diagram showing the outline of immedi- 
ate type resource reservation processing which is 
executed by the policy server in response to a 
request from a network user. 
FIG. 8 is a diagram showing the outline of resource 
reservation request processing which is executed 
by the policy server in response to a request from 
the policy server of an other organization. 
FIG. 9 is a diagram showing the outline of network 
routes, via which information is exchanged among 
a plurality of organizations. 
FIG. 10 is a diagram showing a link-to-boundary- 
router correspondence table. 
FIG. 1 1 is a diagram showing an inter-organization 
link management table. 

FIG. 12 is a diagram showing an example of con- 
tents of a policy object 

DESCRIPTION OF THE EMBODIMENTS 

(1) Network system configuration 

'[0013] FIG. 1 is a diagram showing an example of a 
network and an example of information sent to a policy 
server. 

[0014] The network system comprises a router net- 
work comprising a plurality of routers (101a-101e) and 
end node PCs (Personal Computers) (102a-102f) con- 
nected to the router network via hubs (103a-103b). A 
policy server (1 04), responsible for integrally managing 
and controlling the network resources of each router, is 
connected to this network. In general, a network man- 
ager (1 05) manages the operation status of a network 
(100) and, as necessary, changes the setting of the 
routers. In a network (110) comprising end nodes and 
hubs connecting the end nodes, users (106a-106b) in 
the end nodes of the network can change the setting of 
the hubs. 

[0015] That is, the network shown in the figure com- 
prises the network (100) operated by the network man- 
ager and the network (110) used by the end users. 
[0016] The policy server (104) is connected physi- 
cally to one of routers (101a in FIG. 1) in the network 
(100). The policy server (104) is connected logically to 
any router in the network (100). Communication 
between the policy server (104) and a router is per- 
formed via a protocol such as COPS (Common Open 
Policy Service) described above. 
[0017] Although not shown in FIG. 1, a network 
management server may be included in the network for 
managing the devices on the network. The network 



management server uses the above-described Simple 
Network Management Protocol (SNMP) to manage net- 
work devices including routers and to manage topology 
information and route information on the network 

5 devices. The network" management server and the pol- 
icy server may exchange and share the route informa- 
tion and the topology information between them. These 
two servers may be implemented on one server. 
[001 8] I n this network system, the network manager 

10 registers in the policy server, in advance, a description 
(107) describing the operation policy for network 
resource reservation. 

[001 9] The operation policy is composed of network 
management information required for managing each 
15 group, including information on group members, priority, 
resource reservation conditions, route limitations, and 
so on. 

[0020] On the other hand, a resource reservation 
request from the user specifies the requesting user 

20 name, the PC identifier, conditions for the required 
resources, and so on (108). Resource reservation 
requests are classified into two types: p re-reservation 
type requests used to reserve, in advance, the 
resources that will be required in future and immediate 

25 type requests that are issued immediately according to 
the user's need. 

[0021] All resource reservation requests are sent to 
the policy server. The policy server adjusts each 
request appropriately according to the operation policy 
30 and then sets it in the corresponding router via a 
resource reservation control instruction. 

(2) Policy server configuration 

35 [0022] FIG. 2 is a diagram showing the configura- 
tion of the policy server. The policy server is imple- 
mented by a program which runs on a standard 
computer (201). The computer (201) comprises a cen- 
tral processing unit (201a), a communication I/O inter- 
na face controller (201 b), a keyboard and mouse controller 
(201c), a video board controller (201 d), a disk controller 
(201 e), and a main storage unit (201f). A keyboard and 
mouse (202), a display (203), a portable external stor- 
age medium (204), and a hard disk (205) are connected 
45 to the computer (201). A policy server database group 
(210) and a policy server program (211) have been 
installed on the hard disk (205) from the portable exter- 
nal storage medium (204) or via the network to which 
the policy server is connected. The policy server is 
so implemented when the program is read into the main 
storage unit (201 f) for execution. 
[0023] FIG. 3 is a diagram showing the functional 
modules constituting the policy server, and the corre- 
sponding databases. 
55 [0024] The functions of the policy server are imple- 
mented when the processor executes the program in 
the hardware configuration described above. 
[0025] In the embodiment, a network that is operat- 
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ing under an operation policy is defined as an organiza- 
tion. Therefore, the policy server is composed of two 
types of functions. One is an intra-organization resource 
reservation function (300) which adjusts resource reser- 
vation within the local organization. The other is an 5 
inter-organization route information providing function 
(320) which informs other organizations of information 
on a part of the operation policy of the local organization 
when it is necessary to reserve communication routes 
to other organizations. 10 
[0026] The intra-organization resource reservation 
function (300) comprises the following functional mod- 
ules and databases: a subscriber information 
search/update module (301 ) and a subscriber database 
(301 a) provided for information on the users of the local 15 
organization; an operation policy search/update module 
(302) and an operation policy database (302a) provided 
for information described by the network manager as an 
operation policy; a manager GUI module (303) which 
allows the network manager to enter, update, and main- 20 
tain various settings; a user request acceptance module 
(304) which accepts network resource reservation 
requests, both pre- reservation type and immediate 
type, from the user; a resource reservation mediation 
control module (305) which mediates an individual 25 
resource reservation request according to the operation 
policy for controlling resource reservation; a network 
route information database (305a) for storing informa- 
tion to be used for mediation control processing; and a 
resource reservation status database (306a), and uses 30 
an other-organization resource reservation request pre- 
processing module (306) which pre-processes a 
resource reservation request that is issued to some 
other organization. 

[0027] The intra-organization resource reservation 35 
function (300) further comprises a resource reservation 
schedule search/update module (307) and a resource 
reservation schedule database (308a) which process 
and store the setting of a mediated pre-reservation type 
network resource reservation request; a resource reser- 40 
vation execution module (308) which issues to a router 
a control instruction specifying the setting of a pre-res- 
ervation type network resource reservation request 
whose reservation date has arrived and an immediate 
type network resource reservation request which has 45 
been mediated; an account management module (309) 
which performs account processing when the reserved 
resource is charged; and a network configuration infor- 
mation update module (31 1 ) which regularly checks the 
contents of the network route information database so 
(305a) and a resource reservation status database 
(306a) and updates them as necessary. 
[0028] The inter-organization route information pro- 
viding function (320) comprises two modules: other- 
organization resource reservation request pre-process- 55 
ing module (306) and inter-organization resource reser- 
vation module (310). The other-organization resource 
reservation request pre-processing module (306) pre- 



processes a resource reservation request that will be 
issued to an other organization. The inter-organization 
resource reservation module (310) exchanges organi- 
zation information with other organizations that is nec- 
essary for inter-organization communication, 
references the exchanged information, and sends or 
receives a network resource reservation request to or 
from other organizations for inter-organization commu- 
nication. 

[0029] A local-organization subscriber manage- 
ment table (321a) contains information on the organiza- 
tions to which the subscribers in the local organization 
are allowed to connect and which service they are 
allowed to use when connecting to those organizations. 
An other-organization subscriber management table 
(321b) contains information on the organizations to 
which the other organization users belong and on the 
services they can use to connect to this local organiza- 
tion. An inter-organization link management table 
(321c) contains information on link connection among 
organizations and desired relations between services 
and links. 

[0030] A link-to-boundary-router correspondence 
table (322a) contains information on which router in the 
local organization and which router in an other organi- 
zation form each of the links. A link bandwidth usage 
status table (322b) contains information on the maxi- 
mum bandwidth available for the link and the amount of 
bandwidth currently used. An inter-organization com- 
munication resource reservation status table (322c) 
contains information on the current status of the inter- 
organization resource reservation. 
[0031] FIG. 4 is a diagram showing the relation 
among the functions and databases shown in FIG. 3 
and how those functions access data. In the figure, solid 
lines indicate the flow of processing, and broken lines 
indicate which function accesses which data. 

(3) Operation policy setting 

[0032] FIG. 5 is a diagram showing the outline of 
processing executed when the network manager sets 
an operation policy in the policy server. To allow the 
manager to enter or maintain an operation policy, the 
manager Graphical User Interface (GUI) module (303) 
first displays a GUI input/output screen. Policy informa- 
tion (400) the network manager enters on this screen 
applies to all users belonging to a division, for example, 
all users belonging to a section named section D. 
[0033] Next, based on the information entered by 
the network manager via the GUI screen, the subscriber 
information search/update module (301) searches the 
subscriber database (301a) for subscriber information 
for which the operation policy is to be set or updates the 
subscriber information. The subscriber information 
search/update module (301) is subdivided into the fol- 
lowing functions: entry data analyzing function which 
analyzes and classifies entered data, the subscriber 
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record search function which searches the subscriber 
database for records, the member list update function 
which updates subscriber information according to the 
information entered by the manager, and the operation 
policy instance index creation/update function which 5 
creates and updates index information to be used for 
searching for operation policy object instances into 
which entered data is stored. 

[0034] The operation policy search/update module 
(302) comprises two functions: the operation policy io 
instance creation/update function which creates or 
updates the instance of an operation policy object for 
each member and the policy property update function 
which stores, for each member, network resource 
usage limitation information and so on into the operation is 
policy object as property information. The operation pol- 
icy instance creation/update function converts entered 
operation policy information into the instance of an 
operation policy object for each member. The policy 
property update function stores an operation policy, 20 
including information on network resource usage limita- 
tion on each member, into an operation policy object as 
the operation policy object property information. The 
function then stores the policy object information into 
the operation policy database (302a). 25 

(4) P re-reservation type resource reservation 

[0035] A p re-reservation type resource reservation 
request is sent to the policy server as a resource reser- 30 
vation request whose communication start time and 
communication end time are specified by the user as a 
date or a period of time. The request is sent from the 
user's end node to the policy server by an existing pro- 
tocol or a command. Or, the network manager may 35 
enter this request into the policy server as a command 
or an instruction in response to a required condition 
sent from the user via a telephone or electronic mail. 
Upon accepting this request, the policy server starts 
pre- reservation type resource reservation. Referring to 40 
FIG. 6, this processing will be described. 
[0036] The user request acceptance module (304) 
is executed first. A request receiving function (511) of 
this module receives a user request, shown as a pre- 
servation type network resource reservation request 45 
(108a), specifying the resource reservation requesting 
user, both ends requesting the resource, resource res- 
ervation content, and resource reservation period. 
Then, a request content analyzing function (51 2) of the 
user request acceptance module (304) classifies and so 
analyzes the received request. 

[0037] Next, the subscriber information 
search/update module (301) searches the subscriber 
database (301a) for the user information, identifies the 
request sending user, and checks the operation policy 55 
of the user. 

[0038] When the network manager receives the 
request, not via the network, but directly from the user, 



the network manager enters the user request via the 
manager GUI module (303). The network manager also 
uses the manager GUI module (303) when he or she 
performs setup processing in response to a reservation 
request for individual resources. 
[0039] Next, to check the resource reservation 
request sent from the user, the operation policy 
search/update module (302) searches the operation 
policy database (302a) for the content of the operation 
policy of the request-sending user using the request- 
sending user as the key. The search result is the opera- 
tion policy information such as the one shown in the 
result (501 ). This is obtained by searching the operation 
policy database for the user. 

[0040] Next, the resource reservation mediation 
control module (305) performs processing described 
below. 

[0041] A request content checking function (513) of 
this module searches the resource reservation status 
database (306a) for the resource status of the network. 
The function then compares the pre-reservation type 
network resource reservation request (108a) from the 
user with content of the operation policy of the user 
obtained from the already-defined operation policy 
(501). 

[0042] For a . request satisfying the conditions 
defined in the operation policy, a network route search 
function (514) searches the network route information 
database (305a) for the network route to be used for 
resource reservation to check to see if the requested 
resource may be reserved. 

[0043] Based on the information included in the 
inter-organization link management table (321c) con- 
taining information on the routes for connection with 
other organizations, an inter-organization route usage 
checking function (515) checks the route, obtained as a 
result of the search, to see if the route is completely 
included in the organization and if it is necessary to 
send the request to other organizations. 
[0044] A resource reservation checking function 
(516) determines the routes on which network 
resources are to be reserved and which resources are 
to be actually reserved. Upon recognizing a need to use 
a route in an other organization, the inter-organization 
route usage checking function (515) passes control to 
the other- organization resource reservation request 
pre-processing module (306) to form a resource reser- 
vation request message to be sent to the other organi- 
zation. Communication with the other organization is 
performed between the policy server of the local organ- 
ization and the policy server of the other organization 
via a protocol such as COPS. 

[0045] If the result of checking is negative in step 
513 or 516, the resource reservation module informs 
the network manager or the end node that the request 
has been rejected. 

[0046] The resource reservation schedule 
search/update module (307) converts the finally deter- 
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mined resource reservation setting to a policy object 
that is a form executable by the resource reservation 
function and registers it. FIG. 12 shows an example of 
the policy object. 

[0047] Then, the resource reservation execution 5 
module (308) interprets the registered policy object 
according to the resource reservation schedule within 
the organization and sends a resource reservation con- 
trol command to all routers on the route described in the 
policy object using a protocol such as SNMP and w 
COPS. In addition, when the other-organization 
resource reservation request pre-processing module 
(306) was executed, the inter-organization resource 
reservation module (310) is executed. The router which 
receives the control command described above sets up 15 
the network route and reserves the resources. 

(5) Immediate type resource reservation 

[0048] An immediate type resource reservation 20 
request is sent from a user terminal (end node) to a 
router via an existing protocol such as RSVR Upon 
receiving this request, the router does not forward it to 
the next router but instead transfers it to the policy 
server. The policy server makes adjustment according 25 
to the operation policy in the same way as the pre-res- 
ervation type request and asks the routers on the routes 
to reserve the required bandwidth. The policy server 
informs the user terminal, via the existing protocol such 
as RSVR whether or not the bandwidth has been 30 
reserved. 

[0049] FIG. 7 is a diagram showing the outline of 
immediate type resource reservation processing 
described above. Similarly to the pre- reservation type 
resource reservation processing, the immediate type 35 
resource reservation processing is started when a net- 
work resource reservation request is received from the 
user. This request includes a resource reservation 
request specifying the reservation of resources from the 
current time to a particular point in time in future. The 40 
user request acceptance module (304) processes an 
immediate type network resource reservation request 
(108b), shown in FIG. 7, in the same manner as in FIG. 
6. The subscriber information search/update module 

(301) and the operation policy search/update module 45 

(302) perform processing in the same manner as in FIG. 
6. 

[0050] The search result is operation policy infor- 
mation (601) such as the one shown in the example. 
This is obtained by searching the operation policy data- 50 
base, shown in the figure, for the user using the request- 
sending user and the current time as the key. The 
resource reservation mediation control module (305) 
checks the already-defined operation policy (601) to 
see if the resource reservation request (108b) from the 55 
user may be accepted. For a request satisfying the con- 
ditions defined in the operation policy, the resource res- 
ervation mediation control module (305) examines the 



current network resource status and the routes on 
which the resources are to be reserved to check to see 
if the requested resources may be reserved. It then 
determines the routes on which network resources are 
to be reserved and the resources to be actually 
reserved. The request content checking function (513), 
network route search function (514), and inter-organiza- 
tion route usage checking function (515) of the resource 
reservation mediation control module (305) are the 
same as those shown in FIG. 6. 
[0051] A resource reservation status search func- 
tion (616) references information collected by the net- 
work management system and so on to search for the 
current resource reservation status. Then, the resource 
reservation checking function (617) determines the 
routes on which network resources are to be reserved 
and the resources to be actually reserved. The other- 
organization resource reservation request pre-process- 
ing module (306) and the resource reservation execu- 
tion module (308) perform the same processing as in 
FIG. 6. In addition, when the other-organization 
resource reservation request pre-processing module 
(306) was executed, the inter-organization resource 
reservation module (310) is executed. The processing 
executed by this module is the same as that described 
in FIG. 6. 

[0052] Finally, the account management module 
(309) calculates the charge for the immediate type 
resource reservation request and registers the result. 
For a pre-reservation type request, the resource reser- 
vation charge may be calculated using registered 
schedules andvthe execution results. However, for an 
immediate type resource reservation request, the 
charge must be calculated at this time because the 
charge is calculated for the resources that have been 
actually reserved. 

(6) Resource reservation request from a other organiza- 
tion 

[0053] In resource reservation processing shown in 
FIGS. 6 and 7, a resource reservation request is issued, 
as necessary, to the policy server of an other organiza- 
tion. 

[0054] FIG. 8 is a diagram showing the outline of 
processing of a resource reservation request received 
from the policy server of an other organization. A 
resource reservation request received from the other 
organization is processed in the same manner as it is 
received from within the local organization. That is, the 
request is checked with the content of the operation pol- 
icy to determine the resources to be reserved. However, 
processing for a request received from within the local 
organization and processing for a request received from 
an other organization differ in that a part of information 
on the request-sending organization is hidden because 
the request sending organization and the request 
receiving organization are different. Processing for a 
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resource reservation request received from a other 
organization is started when the request is received 
from the other organization. 

[0055] The request content receiving function (51 1 ) 
of an other-organization request acceptance module 5 
(322), which is executed first, receives a request, shown 
in a network resource reservation request (108), from 
an other organization and disassembles the request. 
The request content analyzing function (512) then clas- 
sifies and analyzes the content. It should be noted that, w 
for a resource reservation request from the other organ- 
ization, the issuer of the request is the organization 
which has sent the request. This processing is effective 
when user information is not shared among different 
organizations. 15 
[0056] The subscriber information search/update 
module (301) and the operation policy search/update 
module (302) perform the same processing as in FIGS. 
6 and 7. The search result is operation policy informa- 
tion (701) such as the one shown in the figure. This is 20 
obtained by searching the operation policy database for 
the corresponding organization. 
[0057] A other-organization resource reservation 
mediation control module (321) checks the resource 
reservation request (1 08c) from the other organization 25 
with the search result (701) obtained by searching the 
operation policy which is prepared, in advance, for other 
organizations. For a request satisfying the conditions 
defined in the operation policy, the other-organization 
resource reservation mediation control module (321) 30 
examines the current status of the network resources to 
be used for resource reservation and the routes on 
which the resources are to be reserved to check to see 
if the requested resources may be reserved. Then, the 
module determines the routes on which network 35 
resources are to be reserved and the resources to be 
actually reserved. 

[0058] The request content checking function (51 3), 
network route search function (514), inter-organization 
route usage checking function (615), resource reserva- 40 
tion status search function (616), and resource reserva- 
tion checking function (617) of the other-organization 
resource reservation mediation control module (321) 
perform the same processing described in FIG. 7. 
[0059] Then, the account management module 45 
(309) calculates the charge for the resources that have 
been reserved and sends back the calculated charge to 
the requesting organization (719). The other-organiza- 
tion resource reservation request pre-processing mod- 
ule (306) performs processing described in FIGS. 6 and so 
7. In addition, when the other-organization resource 
reservation request pre-processing module (306) was 
executed, the inter-organization resource reservation 
module (310) is executed. The processing executed by 
this module is the same as that described in FIG. 6. 55 
[0060] FIG. 9 is a diagram showing the outline of 
network routes via which information is exchanged 
among a plurality of organization in this embodiment. 



[0061] In this embodiment, an organization is 
defined as an area (domain) with a partial network oper- 
ating under its own operation policy. Therefore, the 
whole network is composed of a plurality of policy 
domains (networks), each having its own operation pol- 
icy and each connected to others. The positions of the 
connection parts between organizations should be 
strictly defined, and the operation policy at each con- 
nection part must be agreed on by the both organiza- 
tions. The example in the figure shows the connection 
among organization A, organization B, organization C, 
and organization D. The intra-organization and inter- 
organization subscriber management tables are made 
accessible and exchanged between organizations irreg- 
ularly. 

[0062] The policy server manager creates inter- 
organization physical network route information, for 
example, the link-to-boundary-router correspondence 
table such as the one shown in FIG. 1 0 and the inter- 
organization link management table such as the one 
shown in FIG. 11. 

[0063] As shown in the I ink-to-boundary- router cor- 
respondence table in FIG. 10, the information shared 
between organizations includes information on the 
routes connecting the organizations, but not information 
on the connection points belonging to each organiza- 
tion. Therefore, when the policy server of organization A 
receives a resource reservation request requiring a con- 
nection to organization B, it checks the routes between 
organizations A and B with the resource reservation 
request from the user. That is, the policy server checks 
routes L1 (801), L2 (802), L3 (803), and a route via 
other organization (s) to determine the route satisfying 
the resource reservation request for organization B. 
Similarly, when the policy server of organization B 
receives a resource reservation request requiring a con- 
nection to some other organization, the policy server 
checks L1 (801), L2 (802), L3 (803), and a route via 
some other organizations to select one of them. 
[0064] If it is determined that route L2 is selected for 
connection from organization A to organization B and a 
resource reservation request for route 12 is issued, the 
policy server of organization A processes, within organ- 
ization A, the resource reservation request which was 
issued from the user. That is, the policy server proc- 
esses the request as a resource reservation request for 
the resources between the end node of the requesting 
user and the connection point P2 (812) of routes L2 and 
L3 belonging to organization A. 

(7) Modifications 

[0065] There are several types of routers, and many 
types of information may be controlled externally. In the 
embodiment, the policy server sends a routing and 
bandwidth reservation instruction to the associated 
router. However, for a router performing a static routing, 
in which the route is not controllable externally, the pol- 
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icy server sends only a bandwidth reservation instruc- 
tion to the associated router. Characteristic information 
on those routers may be stored in the network route 
Information database. 

[0066] In the embodiment, many methods for send- 5 
ing a resource reservation request from the user to the 
policy server. Other methods may also be used. An 
immediate type resource reservation request may also 
be sent from the user terminal directly to the policy 
server. w 

Claims 

1 . A network system comprising: 

15 

at least one end node (102) connected to a net- 
work and having means for issuing a network 
resource reservation request; and 
a policy server (104) connected to the network 
comprising: 20 
means (210) for storing therein a network 
resource operation policy and network 
resource usage status information; 
means (304) for accepting said network 
resource reservation request issued by the end 25 
node; 

means (305) for determining network resource 
reservation, based on said network resource 
reservation request and on the stored opera- 
tion policy and usage status information, and 30 
for storing the determined network resource 
reservation; and 

means (308) for issuing to an associated net- 
work device a control instruction executing the 
determined network resource reservation. 35 

2. The network system according to claim 1 , wherein 

said network resource reservation request is a 
pre-reservation type resource reservation 40 
request requesting the network resource reser- 
vation in future and 

said policy server (104) issues the control 
instruction to the network device at a time 
specified by the pre-reservation type resource 45 
reservation request. 

3. The network system according to claim 1 , wherein 

said network resource reservation request is so 
an immediate type resource reservation 
request immediately requesting the network 
resource reservation, and 
said policy server (104) issues the control 
instruction to the network device immediately. 55 

4. The network system according to claim 1 , wherein 



said means (305) for determining the network 
resource reservation in said policy server (104) 
determines a bandwidth to be reserved and 
said means (308) for issuing the control 
instruction issues the control instruction reserv- 
ing the bandwidth. 

5. The network system according to claim 1 , wherein 

said means (305) for determining the network 
resource reservation in said policy server (1 04) 
determines a route and a bandwidth to be 
reserved and 

said means (308) for issuing the control 
instruction issues to the network device on the 
determined route the control instruction reserv- 
ing the route and the bandwidth. 

6. The network system according to claim 1 , wherein 

said network includes a plurality of sub-net- 
works each managed by the policy server (1 04) 
and, 

when said network resource reservation 
request that has been received is associated 
with the sub- network managed by an other pol- 
icy server, the policy server further comprises 
means (320) for issuing the network resource 
reservation request to the other policy server. 

7. A network resource reservation method, compris- 
ing the steps of: 

storing a network resource operation policy 
and network resource usage status informa- 
tion; 

accepting a network resource reservation 
request issued by an end node connected to a 
network; 

determining network resource reservation, 
based on said network resource reservation 
request and on the stored operation policy and 
usage status information, and storing the 
determined network resource reservation; and 
issuing to an associated network device a con- 
trol instruction executing the determined net- 
work resource reservation. 

8. The network resource reservation method accord- 
ing to claim 7, further comprising the step of: 

when said network resource reservation 
request does not follow the stored operation 
policy or when the requested network 
resources cannot be reserved, informing the 
end node issuing the network resource reser- 
vation request that the network resource reser- 
vation request is rejected. 
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9. A policy server connected to a network and per- 
forming network resource reservation and manage- 
ment, comprising: 

means (210) for storing a network resource 5 
operation policy and network resource usage 
status information; • 

means (304) for accepting a network resource 
reservation request issued by an end node 
connected to a network; 10 
means (305) for determining network resource 
reservation, based on said network resource 
reservation request and on the stored opera- 
tion policy and usage status information, and 
for storing the determined network resource 15 
reservation; and 

means (308) for issuing to an associated net- 
work device a control instruction executing the 
determined network resource reservation. 

20 

10. The policy server (104) according to claim 9, 
wherein 

when a p re-reservation type resource reserva- 
tion request requesting the network resource 25 
reservation in future is received, the policy 
server issues the control instruction to the net- 
work device at a time specified by the request 

1 1 . The policy server according to claim 9, wherein 30 

when an immediate type resource reservation 
request immediately requesting the network 
resource reservation is received, said policy 
server issues the control instruction to the net- 35 
work device immediately. 

12. A network resource reservation program causing a 
computer system to: 

40 

store a network resource operation policy and 
network resource usage status information; 
accept a network resource reservation request 
issued by an end node connected to a network; 
determine network resource reservation, 45 
based on said network resource reservation 
request and on the stored operation policy and 
usage status information, and to store the 
determined network resource reservation; and 
issue to an associated network device a control so 
instruction executing the determined network 
resource reservation. 
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FIG. 6 



REQUESTING USER: USER A 
PARTNER: USER B 
DESTINATION PC: PCS 
GUARANTEED BANDWIDTH: 

3MbpS 
START TIME: 09:00 
END TIME: 11:30 



108a 
501 



GROUP: SECTION D 
PRIORITY: 1 

AVAILABLE BANDWIDTH: 5Mbps 
AVAILABLE TIME: 09:00-20:00 
MEMBER: USER A 
MEMBER: USERB 



306 



OTHER-ORGANIZATION 
RESOURCE RESERVATION 
REQUEST PRE-PROCESSING 
MODULE 



310 



INTER-ORGANIZATION 
RESOURCE RESERVATION 
MODULE 



r 



PRE-RESERVATION TYPE 
RESOURCE RESERVATION 



USER REQUEST ACCEPTANCE 
MODULE 



RECEIVE REQUEST 



ANALYZE REQUEST 



•304 
511 

512 



MANAGER GUI MODULE 



X 



SUBSCRIBER INFORMATION 
SEARCH/UPDATE MODULE 



— 303 
~301 



OPERATION POLICY SEARCH/ 
UPDATE MODULE 



4 



x 



( 



RESOURCE RESERVATION 
MEDIATION CONTROL MODULE 

CHECK REQUEST CONTENT 
IOK 



o 



SEARCH FOR NETWORK ROUTE 



X 



CHECK INTER-ORGANIZATION 
ROUTE USAGE 



IE 



CHECK RESOURCE RESERVATION 



OK 



302 

305 
513 



-ERROR 



514 

515 
516 



-ERROR 



RESOURCE RESERVATION SCHEDULE 
SEARCH/UPDATE MODULE 



X 



— 307 




RESOURCE RESERVATION 
EXECUTION MODULE 
I 



— 308 



INTER-ORGANIZATION RESOURCE 
RESERVATION REQUIRED? 

iN 



) 



ACCOUNT MANAGEMENT MODULE 
* 



— 309 



END OF PROCESSING 



15 



EP 1 047 226 A2 



FIG. 7 



108b 



REQUESTING USER: USER A 
PARTNER: USERB 
DESTINATION PC: PC6 
GUARANTEED BANDWIDTH: 

3Mbps 
END TIME: 11:30 



601 



GROUP: SECTION D 
PRIORITY: 1 

AVAILABLE BANDWIDTH: 5Mbps 
AVAILABLE TIME: 09:00-11:30 
MEMBER: USER A 
MEMBER: USER B 



306 



OTHER-ORGANIZATION 
RESOURCE RESERVATION 
REQUEST PRE-PROCESSING 
MODULE 



IMMEDIATE TYPE RESOURCE 
RESERVATION 



X 



USER REQUEST ACCEPTANCE 
MODULE 



RECEIVE REQUEST 



ANALYZE REQUEST 



SUBSCRIBER INFORMATION 
SEAR CH/UPDATE MODULE 



CHECKING 
RESULT 



OPERATION POLICY SEARCH/ 
UPDATE MODULE 



CHECK REQUEST 



J OK 



< 



CHECK INTER-ORGANIZATION 
ROUTE USAGE 

m — 



SEARCH FOR RESOURCE 
RESERVATION STATUS 

i 



— 304 



511 



512 



301 



— 302 



RESOURCE RESERVATION 
MEDIATION CONTROL MODULE 



|~305 
513 

—ERROR 



5 m 



SEARCH FOR NETWORK ROUTE 



514 



515 



CHECK RESOURCE RESERVATION 



310 

±2l 



OK 



^ NG 



INTER-ORGANIZATION 
RESOURCE RESERVATION 
MODULE 



RESOURCE RESERVATION 
EXECUTION MODULE 



616 
617 

-ERROR 
308 




INTER-ORGANIZATION RESOURCE 
RESERVATION REQUIRED? 



IK 



) 



ACCOUNT MANAGEMENT MODULE 



309 



END OF PROCESSING 



16 



EP 1 047 226 A2 



FIG. 8 



108c 



REQUESTING ORGANIZATION: 

ORGANIZATION 1 
ROUTE USED: L1 
PARTNER: USER B 
DESTINATION PC: PCS 
GUARANTEED BANDWIDTH: 

3Mbps 
START TIME: 09:00 
END TIME: 11:30 



RESOURCE RESERVATION REQUEST 
FROM OTHER ORGANIZATION 



OTHER-ORGANIZATION REQUEST 
ACCEPTANCE MODULE 



RECEIVE REQUEST 



ANALYZE REQUEST 



PARTNER ORGANIZATION: 

ORGANIZATION 1 
PRIORITY: 3 
AVAILABLE ROUTE: L1 
AVAILABLE BANDWIDTH: 5Mbps 
AVAILABLE TIME: 09:00-20:00 
CONTRACT TYPE: PAY FOR USE 
ACCOUNT: ¥0.5/Kbps*min 



701 



7^" 



SUBSCRIBER INFORMATION 
SEARCH/UPDAT E MODUL E 
« 



-322 
511 
512 

-301 



OTHER-ORGANIZATION RESOURCE 
RESERVATION REQUEST 
PRE-PROCESSING MODULE 



306 



7=^ 
310^ 



< 



CHECKING 
RESULT 



INTER-ORGANIZATION 
RESOURCE RESERVATION 
MODULE 



702^ 



RESERVATION PERMISSION: 

YES 
PRIORITY: 3 

AVAILABLE BANDWIDTH: 
3Mbps 

AVAILABLE TIME: 09:00-20:00 
ACCOUNT DETAIL: ¥500/min 




OPERATION POLICY SEARCH/ 
UPDATE MODULE 



—302 



OTHER-ORGANIZATION RESOURCE RESER- 
VATION MEDIATION CONTROL MODULE 



CHECK REQUEST 



"Tok" 



SEARCH FOR NETWORK ROUTE 



CHECK WHETHER TO USE 
INTER-ORGANIZATION ROUTE 



IE 



SEARCH FOR RESOURCE 
RESERVATION STATUS 



T 



i » ^check resource re servation 
"Tok" 



ACCOUNT MANAGEMENT MODULE 



I 



'INTER-ORGANIZATION RESOURCE^ 
RESERVATION REQUIRED? , 



RESPOND TO REQUESTING 
ORGANIZATION 



514 



615 




•ERROR 



309 



719 



END OF PROCESSING 



17 



EP 1 047 226 A2 



FIG. 9 




18 



EP 1 047 226 A2 



FIG. 10 

322a 



INTER-ORGANIZATION 
LINK ID 


LOCAL ORGANIZATION 
BOUNDARY ROUTER 


OTHER ORGANIZATION 
BOUNDARY ROUTER 


L1 


133.144.155.1 


133.200.10.2 


L2 


133.144.155.2 


133.200.10.3 


L3 


133.144.155.3 


133.200.10.4 


L4 


133.144.155.4 


202.32.43.2 


L5 


133.144.155.5 


145.324.3.2 



FIG. 11 

322b 



INTER-ORGANIZATION 
LINK ID 


MAXIMUM AVAILABLE 
BANDWIDTH 


BANDWIDTH BEING 
USED 


L1 


32M 


12M 


12 


8M 


7M 


L3 


16M 


10M 


L4 


4M 


OM 


L5 


10M 


4M 



19 



EP 1 047 226 A2 



FIG. 12 



RESOURCE RESERVATION OBJECT (PC OF USER A. ROUTER 1) 



OBJECT ID 


00000001 


REQUESTING USER 


USER A 


SOURCE 


ADDRESS A 


DESTINATION 


ROUTER 1 


GUARANTEED BANDWIDTH 


3Mbps 


START TIME 


09:00 


END TIME 


11:30 



RESOURCE RESERVATION OBJECT (ROUTER 1. ROUTER 2) 



OBJECT ID 


00000002 


REQUESTING USER 


USER A 


SOURCE 


ROUTER 1 


DESTINATION 


ROUTER 2 


GUARANTEED BANDWIDTH 


3Mbps 


START TIME 


09:00 


END TIME 


11:30 



20 



